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Abstract 

Robustness of distributed routing policies is studied for dynamical flow networks, with respect to 
adversarial disturbances that reduce the link flow capacities. A dynamical flow network is modeled as 
a system of ordinary differential equations derived from mass conservation laws on a directed acyclic 
graph with a single origin-destination pair and a constant inflow at the origin. Routing policies regulate 
the way the inflow at a non-destination node gets split among its outgoing links as a function of the 
current particle density, while the outflow of a link is modeled to depend on the current particle density 
on that link through a flow function. The dynamical flow network is called partially transferring if the 
total inflow at the destination node is asymptotically bounded away from zero, and its weak resilience is 
measured as the minimum sum of the link-wise magnitude of all disturbances that make it not partially 
transferring. The weak resilience of a dynamical flow network with arbitrary routing policy is shown 
to be upper-bounded by the network's min-cut capacity, independently of the initial flow conditions. 
Moreover, a class of distributed routing policies that rely exclusively on local information on the particle 
densities, and are locally responsive to that, is shown to yield such maximal weak resilience. These 
results imply that locality constraints on the information available to the routing policies do not cause 
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loss of weak resilience. Some fundamental properties of dynamical flow networks driven by locally 
responsive distributed policies are analyzed in detail, including global convergence to a unique limit 
flow. 

Index terms: dynamical flow networks, distributed routing policies, weak resilience, min-cut 
capacity, cooperative dynamical systems. 

I. Introduction 

Flow networks provide a fruitful modeling framework for many applications of interest such 
as transportation, data, and production networks. They entail a fluid-like description of the 
macroscopic motion of particles, which are routed from their origins to their destinations via 
intermediate nodes: we refer to standard textbooks, such as [2], for a thorough treatment. 

The present and a companion paper [3] study dynamical flow networks, modeled as systems of 
ordinary differential equations derived from mass conservation laws on directed acyclic graphs 
with a single origin-destination pair and a constant inflow at the origin. The rate of change 
of the particle density on each link of the network equals the difference between the inflow 
and the outflow of that link. The latter is modeled to depend on the current particle density 
on that link through a flow function. On the other hand, the way the inflow at an intermediate 
node gets split among its outgoing links depends on the current particle density, possibly on 
the whole network, through a routing policy. Such a routing policy is said to be distributed if 
the proportion of inflow routed to the outgoing links of a node is allowed to depend only on 
local information, consisting of the current particle densities on the outgoing links of the same 
node. The inspiration for such a modeling paradigm comes from empirical findings from several 
application domains: in transportation networks [4], the flow functions are typically referred to as 
fundamental diagrams, while the routing policies model the emerging selfish behavior of drivers; 
in data networks [5], flow functions model congestion-dependent throughput and average delays, 
while routing policies are designed in order to optimize the total throughput or other performance 
measures; in production networks [6], flow functions correspond to clearing functions. 

Our objective is the design and analysis of distributed routing policies for dynamical flow 
networks that are maximally robust with respect to adversarial disturbances that reduce the link 
flow capacities. Two notions of transfer efficiency are introduced in order to capture the extremes 
of the resilience of the network towards disturbances: The dynamical flow network is fully 
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transferring if the total inflow at the destination node asymptotically approaches the inflow at the 
origin node, and partially transferring if the total inflow at the destination node is asymptotically 
bounded away from zero. The robustness of distributed routing policies is evaluated in terms of 
the network's strong and weak resilience, which are defined as the minimum sum of link-wise 
magnitude of disturbances making the perturbed dynamical flow network not fully transferring, 
and, respectively, not partially transferring. In this paper, we prove that the maximum possible 
weak resilience is yielded by a class of locally responsive distributed routing policies, which rely 
only on local information on the current particle densities on the network, and are characterized 
by the property that the portion of its inflow that a node routes towards an outgoing link does not 
decrease as the particle density on any other outgoing link increases. Moreover, we show that the 
maximum weak resilience of dynamical flow networks with arbitrary, not necessarily distributed, 
routing policies equals the min-cut capacity of the network and hence is independent of the initial 
equilibrium flow. We also prove some fundamental properties of dynamical flow networks driven 
by locally responsive distributed policies, including global convergence to a unique limit flow. 
Such properties are mainly a consequence of the particular cooperative structure (in the sense 
of [7], [8]) that the dynamical flow network inherits from locally responsive routing policies. 

Stability analysis of network flow control policies under non-persistent disturbances, especially 
in the context of internet, has attracted a lot of attention, e.g., see [9], [10], [11], [12]. Recent 
work on robustness analysis of static flow networks under adversarial and probabiUstic persistent 
disturbances in the spirit of this paper include [13], [14], [15]. It is worth comparing the 
distributed routing policies studied in this paper with the back-pressure policy [16], which is 
one of the most well-known robust distributed routing policy for queueing networks. While 
relying on local information in the same way as the distributed routing policies studied here, 
back-pressure policies require the nodes to have, possibly unlimited, buffer capacity. In contrast, 
in our framework, the nodes have no buffer capacity. In fact, the distributed routing policies 
considered in this paper are closely related to the well-known hot-potato or deflection routing 
policies [17] [5, Sect. 5.1], where the nodes route incoming packets immediately to one of the 
outgoing links. However, to the best of our knowledge, the robustness properties of dynamical 
flow networks, where the outflow from a link is not necessarily equal to its inflow have not been 
studied before. 

The contributions of this paper are as follows: (i) we formulate a novel dynamical system 
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framework for robustness analysis of dynamical flow networks under feedback routing policies, 
possibly constrained in the available information; (ii) we characterize a general class of locally 
responsive distributed routing policies that yield the maximum weak resilience; (iii) we provide a 
simple characterization of the resilience in terms of the topology and capacity of the flow network. 
In particular, the class of locally responsive distributed routing policies can be interpreted as 
approximate Nash equilibria in an appropriate zero-sum game setting where the objective of 
the adversary inflicting the disturbance is to make the network not partially transferring with 
a disturbance of minimum possible magnitude, and the objective of the system planner is to 
design distributed routing policies that yield the maximum possible resilience. The results of 
this paper imply that locality constraints on the information available to routing policies do not 
affect the maximally achievable weak resiUence. In contrast, the companion paper [3] focuses on 
the strong resilience properties of dynamical flow networks, and shows that locally responsive 
distributed routing policies are maximally robust, but only within the class of distributed routing 
policies which are constrained to use only local information on the network congestion status. 

The rest of the paper is organized as follows. In Section II, we formulate the problem by 
formally defining the notion of a dynamical flow network and its resilience, and we prove that the 
weak resilience of a dynamical flow network driven by an arbitrary, not necessarily distributed, 
routing poUcy is upper-bounded by the min-cut capacity of the network. In Section III, we 
introduce the class of locally responsive distributed routing policies, and state the main results on 
dynamical flow networks driven by such locally responsive distributed routing poUcies: Theorem 
1, concerning global convergence towards a unique equilibrium flow; and Theorem 2 concerning 
the maximal weak resilience property. In Sections IV, and V, we state proofs of Theorem 1, and 
Theorem 2, respectively. 

Before proceeding, we define some preliminary notation to be used throughout the paper. Let 
R be the set of real numbers, R+ := {x e R : x > 0} be the set of nonnegative real numbers. 
Let A and B be finite sets. Then, |^| will denote the cardinality of A, R"^ (respectively, R;;:^) 
the space of real-valued (nonnegative-real-valued) vectors whose components are indexed by 
elements of A, and R-^^® the space of matrices whose real entries indexed by pairs of elements 
in Ax B. The transpose of a matrix M e R-^''^, will be denoted by M'^ e R^''-^, while 1 
the all-one vector, whose size will be clear from the context. Let c\{X) be the closure of a set 
X C R-^. A directed multigraph is the pair (V, £) of a finite set V of nodes, and of a multiset 
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E of links consisting of ordered pairs of nodes (i.e., we allow for parallel links). Given a a 
multigraph (V,£^), for every node v e V, we shall denote by C and £~ C S, the set 
of its outgoing and incoming links, respectively. Moreover, we shall use the shorthand notation 
TZ^ := for the set of nonnegative-real- valued vectors whose entries are indexed by elements 
of Sv ■— {p & TZv '■ Yliees+Pe ~ 1} ^'^^ simplex of probability vectors over and 
TZ :— for the set of nonnegative-real-valued vectors whose entries are indexed by the links 
in £. 

II. Dynamical flow networks and their resilience 

In this section, we introduce our model of dynamical flow networks and define the notions of 
transfer efficiency. 

A. Dynamical flow networks 

We start with the following definition of a flow network. 

Definition 1 (Flow network): A flow network N — (T, //) is the pair of a topology, described 
by a finite directed multigraph T — {V,E), where V is the node set and £ is the link multiset, 
and a family of flow fiinctions ji :— {jie '■ R+ — > R+}e6£: describing the functional dependence 
fe — fJ-eiPe) of the flow on the density of particles on every link e e E. The flow capacity of a 
link e E £ is defined as 

fr := sup ^leiPe) . (1) 

Pe>0 

We shall use the notation J^^ := XeG£-+ [Oj Z^'"') the set of admissible flow vectors on 
outgoing links from node v, and := Xee£-[0, Z™") for the set of admissible flow vectors for 
the network. We shall write / := {fe : e e G J^, and p :— {pe : e e S} E TZ, for the 
vectors of flows and of densities, respectively, on the different links. The notation /" := {/g : 
e e E^} E Tv, and p'" :— {pe : e e E^} E TZv will stand for the vectors of flows and densities, 
respectively, on the outgoing links of a node v. We shall compactly denote by / = and 
f" = fi'''ip") the functional relationships between density and flow vectors. 

Throughout this paper, we shall restrict ourselves to network topologies satisfying the follow- 
ing: 
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Fig. 1. A network topology satisfying Assumption 1: the nodes v are labeled by the integers between (denoting the origin 
node) and n (denoting the destination node), in such a way that the label of the head node of each edge is higher than the label 
of its tail node. The inflow at the origin, Ao, maybe interpreted as the input to the dynamical flow network, and the total inflow at 
the destination, Xn{t), as the output. For a £ (0, 1], the dynamical flow network is a-transferring if liminft_»+oo A„(t) > qAo, 
i.e., if at least a-fraction of the inflow at the origin is transferred to the destination, asymptotically. 

Assumption 1: The topology T contains no cycles, has a unique origin (i.e., a node v e V 
such that E~ is empty), and a unique destination (i.e., a node v e V such that is empty). 
Moreover, there exists a path in T to the destination node from every other node in V. 

Assumption 1 implies that one can find a (not necessarily unique) topological ordering of the 
node set V (see, e.g., [18]). We shall assume to have fixed one such ordering, identifying V with 
the integer set {0, 1, ... , n}, where n :— \V\ — 1, in such a way that 



In particular, (2) implies that is the origin node, and n the destination node in the network 
topology T (see Fig. 1). An origin-destination cut (see, e.g., [2]) of T is a partition of V into 
W and V \ W such that e W and n e V \ W. Let 




— 0, . . . ,n . 



(2) 




{{u,v) e£: ueU,v eV\U} 



(3) 
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Fig. 2. An origin/destination cut of the network: W is a subset of nodes including the origin but not the destination n, and 
£^ is the subset of those edges with tail node in U, and head node in 

be the set of all the links pointing from some node in U to some node in V \ W (see Fig. 2). 
The min-cut capacity of a flow network N is defined as 



where the minimization runs over all the origin-destination cuts of T. Throughout this paper, 
we shall assume a constant inflow Aq > at the origin node. Let us define the set of admissible 
equilibrium flows associated to an inflow Aq as 



Then, it follows from the max-flow min-cut theorem (see, e.g., [2]), that J^*(Ao) ^ whenever 
Aq < C{J\f). That is, the min-cut capacity equals the maximum flow that can pass from the origin 
to the destination node while satisfying capacity constraints on the links, and conservation of 
mass at the intermediate nodes. 

Throughout the paper, we shall make the following assumption on the flow functions (see also 



Assum.ption 2: For every link e G S, the map He : M+ — )■ M+ is continuously differentiable, 
strictly increasing, has bounded derivative, and is such that /Xe(0) = 0, and /™'^'' < -l-oo. 




(4) 



Fig. 3): 
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Fig. 3. Qualitative behavior of a flow function satisfying Assumption 2: fXe{Pe) is differentiable, strictly increasing, has bounded 
derivative and such that Ate(O) = 0, and lim He(pe) = fT'^^ < +oo. The median density pjf, as defined in (5) is plotted as 
well. 



Thanks to Assumption 2, one can define the median density on fink e e £ as the unique value 
e M+ such that 

/^e(p^f) = (5) 

Example 1 (Flow function): For every fink e E £,let ae and f^^^ be positive real constants. 
Then, a simple example of flow function satisfying Assumption 2 is given by 

It is easily verified that the flow capacity is /™", while the median density for such a flow 
function is p'^ — log 2. 

We now introduce the notion of a distributed routing policy used in this paper. 

Definition 2 ((Distributed) routing policy): A routing policy for a flow network jV^ is a family 
of differentiable functions Q :— {G" : TZ — > <S^}o<i;<n describing the ratio in which the particle 
flow incoming in each non-destination node v gets split among its outgoing link set as a 
function of the observed current particle density. A routing policy is said to be distributed if, 
for all < V < n, there exists a differentiable function G : TZ^ ^ such that G'"{p) = G^{p") 
for all p eTZ, where p" is the projection of p on the outgoing link set 
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The salient feature in Definition 2 is that a distributed routing poUcy depends only on the local 
information on the particle density p" on the set of outgoing links of the non-destination node 
V, instead of the full vector of current particle densities p on the whole link set £. Throughout 
this paper, we shall make a slight abuse of notation and write G'"{p"), instead of G" {p"), for the 
vector of the fractions in which the inflow of node v gets split into its outgoing links. 

We are now ready to define a dynamical flow network. 

Definition 3 (Dynamical flow network): A dynamical flow network associated to a flow net- 
work M satisfying Assumption 1, a distributed routing policy Q, and an inflow Aq > 0, is the 
dynamical system 
d 



^^p^it) = \{t)Gl{p{t)) - Ut) , VO<^;<n, Vee£+, (6) 



where 




fe{t) := Pe{Pe{t)) , \{t) := { ' ^ ^ (V) 

if ^ <v <n. 

Equation (6) states that the rate of variation of the particle density on a link e outgoing from 
some non-destination node v is given by the difference between A„(t)Gg(p(i)), i.e., the portion 
of the inflow at node v which is routed to link e, and fe{t), i.e., the particle flow on link e. 
Observe that the (distributed) routing policy G'"{p) induces a (local) feedback which couples the 
dynamics of the particle flow on the the different links. 

We can now introduce the following notion of transfer efficiency of a dynamical flow network. 

Definition 4 (Transfer efficiency of a dynamical fiow network): Consider a dynamical flow net- 
work J\f satisfying Assumptions 1 and 2. Given some flow vector f° e T, and a e [0, 1], the 
dynamical flow network (6) is said to be a-transferring with respect to /° if the solution of (6) 
with initial condition p(0) = p~^{f°) satisfies 

liminf A„(t) > ckAq . (8) 

Definition 4 states that a dynamical flow network is ct-transferring when the outflow is 
asymptotically not smaller than a times the inflow. In particular, a fully transferring dynamical 
flow network is characterized by the property of having outflow asymptotically equal to its 
inflow, so that there is no throughput loss. On the other hand, a partially transferring dynamical 
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flow network might allow for some throughput loss, provided that some fraction of the flow is 
still guaranteed to be asymptotically transferred. 

Remark 1: Standard definitions in the literature are typically limited to static flow networks 
describing the particle flow at equilibrium via conservation of mass. In fact, they usually consist 
(see e.g., [2]) in the specification of a topology T, a vector of flow capacities Z™^"" e TZ, and 
an admissible equilibrium flow vector /* e J^(Ao) for Aq < C{J\f) (or, often, /* e cl(J"*(Ao)) 
for Ao < C{J\f)). In contrast, in our model, we focus on the off-equilibrium particle dynamics 
on a flow network jV, induced by a (distributed) routing policy Q. 

B. Examples 

We now present three illustrative applications of the dynamical flow network framework. 

(i) Transportation networks: In transportation networks, particles represent drivers and dis- 
tributed routing policies correspond to their local route choice behavior in response to 
the locally observed link congestions. A desired route choice behavior from a social 
optimization perspective may be achieved by appropriate incentive mechanisms. While 
we do not address the issue of mechanism design in this paper, the companion paper [3] 
discusses the use of tolls in influencing the long-term global route choice behavior of 
drivers to get a desired initial equilibrium state for the network. The robust distributed 
routing policies designed in this paper would correspond to the ideal node-wise route 
choice behavior of the drivers. The flow function iieiPe) presented in this paper is related 
to the notion of fundamental diagram in traffic theory, e.g., see [4]. Note that in our 
formulation, we assume that the density of drivers is homogeneous over a link. One can 
refer to [4] for models that incorporate inhomogeneity, although such models are developed 
under non-feedback routing policies. 

(ii) Data networks: In data networks, the particles represent data packets that are to be routed 
from sources to destinations by routers placed at the nodes (see, e.g., [5, Ch. 5]). Typically 
the average packet delay from one router to the other increases with the increase in queue 
length on the link between the two routers. Hence, one has that such average delay is given 
by de{pe), where d^^Pe) is an increasing function. If one further assumes that the delay 
function de{pe) is concave and such that lim infp^_>.+oo de{pe)/Pe > 0, then the relationship 
between the throughput and the queue length, /e oc pe/de{pe), can be easily shown to 
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satisfy Assumption 2. Therefore, in analogy with the general framework, pe and /e denote 
the queue length and the throughput, respectively, and He{Pe) represents the throughput 
functions on the links of data networks, 
(iii) Production networks: In production networks, the particles represent goods that need to be 
processed by a series of production modules represented by nodes. It is known, e.g., see [6], 
that the rate of doing work decreases with the amount of work in progress at a production 
module. This relationship is formalized by the concept of clearing functions. In this context, 
production networks have a clear analogy with our setup where pe represents the work-in- 
progress, /e represents the rate of doing work, and /ie(pe) represents the clearing function. 
Remark 2: While there are many examples of congestion-dependent throughput functions and 
clearing functions that satisfy Assumption 2, typical fundamental diagrams in transportation 
systems have a fi-shaped profile. While we do not study the implications of this analytically, 
some simulations are provided in [3] illustrating how the results of this paper could be extended 
to this case. 

Remark 3: It is worth stressing that, while distributed routing policies depend only on local 
information on the current congestion, their structural form may depend on some global infor- 
mation on the flow network which might have been accumulated through a slower time-scale 
evolutionary dynamics. A two time-scale process of this sort has been analyzed in our related 
work [19] in the context of transportation networks. Multiple time-scale dynamical processes 
have also been analyzed in [20] in the context of communication networks. 

C. Perturbed dynamical flow networks and resilience 

We shall consider persistent perturbations of the dynamical flow network (6) that reduce the 
flow functions on the Unks, as per the following: 

Definition 5 (Admissible perturbation): An admissible perturbation of a flow network Af — 
(T, p), satisfying Assumptions 1 and 2, is a flow network J\f — (T, ft), with the same topology 
T, and a family of perturbed flow functions jl := {/ie : ^+}ees, such that, for every 

e e £, jj,e satisfies Assumption 2, as well as 

We accordingly let :— sup{/ie(Pe) : Pe > 0}. The magnitude of an admissible perturbation 
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is defined as 



f^ — V] Se, (5e := SUp{/ie(Pe) -/^e(Pe) : Pe > 0} . (9) 

The stretching coefficient of an admissible perturbation is defined as 

9 := max{p^/p^ : e e £} , (10) 

where p^, and p(f are the median densities associated to the unperturbed and the perturbed flow 
functions, respectively, on link e e E, as defined in (5). 

Given a dynamical flow network as in Definition 3, and an admissible perturbation as in 
Definition 5, we shall consider the perturbed dynamical flow network 

^^Mt) = ~X,{t)Gl{p{t)) - fe{t) , \/0<v<n, Vee£+, (11) 

where 

fu\ ~ (~ u\\ \ (,\ J Eee£-/eW if 0<v<n 

fe{t):=Pe{Pe{t)), Xv{t) := < (12) 

I Ao if ^; = 0. 

Observe that the perturbed dynamical flow network (11) has the same structure of the original 
dynamical flow network (6), as it describes the rate of variation of the particle density on each 
Unk e outgoing from some non-destination node v as the difference between Xy{t)Gl{p{t)), i.e., 
the portion of the perturbed inflow at node v which is routed to Unk e, minus the perturbed 
flow on link e itself. Notice that the only difference with respect to the original dynamical 
flow network (6) is in the perturbed flow function Pe{Pe) on each link e e £, which replaces 
the original one, Pe{Pe)- In particular, the (distributed) routing policy Q is the same for the 
unperturbed and the perturbed dynamical flow networks. In this way, we model a situation in 
which the routers are not aware of the fact that the flow network has been perturbed, but react 
to this change only indirectly, in response to variations of the local density vectors p'"{t). 

We are now ready to define the following notion of resiUence of a dynamical flow network 
as in Definition 3 with respect to an initial flow. 

Definition 6 (Resilience of a dynamical flow network): Let A/" be a flow network satisfying 
Assumptions 1 and 2, Q he a distributed routing policy, and Aq > be a constant inflow at 
the origin node. Given a e (0, 1], ^ > 1 and f° e T, let ^a,e{f°: G) be equal to the infimum 
magnitude of all the admissible perturbations of stretching coefficient less than or equal to 9 for 
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which the perturbed dynamical flow network (11) is not o; -transferring with respect to f°. Also, 
define 

7o,,(r,^) :=lim7„,,(r,^;). 
For a e [0, 1], the a-resilience with respect to f° is defined as^ 

7„(r,e;):= lim 7a,e(r,6?). 

>-+oo 

The 1 -resilience will be referred to as the strong resilience, while the 0-resilience will be referred 

to as the weak resilience. 

Remark 4 (Zero-sum game interpretation): The notions of resilience are with respect to ad- 
versarial perturbations. Therefore, one can provide a zero-sum game interpretation as follows. 
Let the strategy space of the system planner be the class of distributed routing policies and the 
strategy space of an adversary be the set of admissible perturbations. Let the utility function 
of the adversary be M6 — 5, where M is a large quantity, e.g., Xlee^" ^e™^"' ^^^^ ® takes the 
value 1 if the network is not a-transferring under given strategies of the system planner and the 
adversary, and zero otherwise. Let the utility function of the system planner be 5—MQ. As stated 
in Sectio n in, a certain class of locally responsive distributed routing policies characterized by 
Definition 7, is maximally robust with respect to the notions of weak and strong resilience. This 
will then show that the locally responsive distributed routing policies correspond to approximate 
Nash equilibria in this zero-sum game setting. 

In the remainder of the paper, we shall focus on the characterization of the weak resiUence 
of dynamical flow networks, while the strong resilience will be addressed in the companion 
paper [3]. Before proceeding, let us elaborate a bit on Definition 6. Notice that, for every 
a G (0,1], the a-resilience "yaif°,Q) is simply the infimum magnitude of all the admissible 
perturbations such that the perturbed dynamical network (11) is not a-transferring with respect 
to the equilibrium flow f°. In fact, one might think of ^a{f°i Q) as the minimum effort required 
by a hypothetical adversary in order to modify the dynamical flow network from (6) to (11), and 
make it not a-transferring, provided that such an effort is measured in terms of the magnitude of 

'it is easily seen that the limits involved in this definition always exist, as ■ya,e{f°,G) is clearly nonincreasing in a (the 
higher a, the more stringent the requirement of a-transfer) and 9 (the higher 9, the more admissible perturbations are considered 
that may potentially make the dynamical flow network to be not a-transferring). 
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the perturbation 5 — X^ggg ||A*e( • ) — Ate( • )lloo- For a — 0, trivially the perturbed network flow 
is always 0-transferring with respect to any initial flow. For this reason, the definition of the 
weak resilience 7o(/°,^) involves the double limit linie^+oo liniaio 7a,e(/°j the introduction 
of the bound on the stretching coefficient of the admissible perturbation is a mere technicality 
whose necessity will become clear in Section V. 

We conclude this section with the following result, providing an upper bound on the weak 
resilience of a dynamical flow network driven by any, not necessarily distributed, routing poUcy 
Q, in terms of the min-cut capacity of the network. Tightness of this bound will follow from 
Theorem 2 in Section III, which will show that, for a particular class of locally responsive 
distributed routing policies, the dynamical flow network has weak resilience equal to the min- 
cut capacity. 

Proposition 1: Let be a flow network satisfying Assumptions 1 and 2, Aq > a constant 
inflow, and Q an arbitrary routing policy. Then, for any initial flow f°, the weak resilience of 
the associated dynamical flow network satisfies 

Proof: We shall prove that, for every a e (0, 1], and every 6 > 1, 

la,e{r,0)<C{M)--Xo. (13) 
Observe that (13) immediately implies that 

7o(r,^;)= lim lim7«,,(r,6;)< iim Urn {C (M) - aXo/2) = C{Af) , 
thus proving the claim. 

Consider a minimal origin-destination cut, i.e., some U C V such that e U, n ^ U, and 
5^ee£:+ ~ ^{■^)- Define e :— aXo/{2C{J\f)), and consider an admissible perturbation such 
that jleiPe) = E:fj,eiPe) for every e G S^, and jleiPe) = Pe{Pe) for all e e £ \ 8^. It is readily 
verified that the magnitude of such perturbation satisfies 

= (1 - ^) Eee.+ = (1 - = ^(-^^ - ' 

while its stretching coefficient is 1. 
Observe that 



~Ut) E /e(^) < Eee.+ = ' Eee£+ = , i > . (14) 

ees+ 
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Now, let W := V \ W be the set of nodes on the destination side of the cut, and observe that 

(15) 



(16) 



Define A := U^^vi;^^. 13 — ^wew^w^ let C(^) — T^eeAPei^)- ^^^^ (1^)' ^he identity 
AdE^ ^ B, and (14), one gets 

= E.,..Aw-E.,.„-Aw 

< aAo/2-A„(i). 
Now assume, by contradiction, that 

liminf Xnit) > aXo . 

Then, there would exist some r > such that A„(i) > 3q;Ao/4 for all t > r. For all i > r, it 
would then follow from (16) that dC{t)/dt < -aXo/A , so that 

C(^) < C(t) + {t- T)aXo/4 

by Gronwall's inequality. Therefore, ((t) would converge to — oo as t grows large, contradicting 
the fact that ({t) > for all t >Q. Then, necessarily 

liminf A„(t) < ckAq , 

so that the perturbed dynamical network is not a-transf erring. This implies (13), and therefore 
the claim. ■ 

III. Main results and discussion 

In this paper, we shall be concerned with a family of maximally robust distributed routing 
policies. Such a family is characterized by the following: 

Definition 7 (Locally responsive distributed routing policy): A locally responsive distributed 
routing policy for a flow network topology T — (V, S) with node set V = {0, 1, . . . , n} is a 
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family of continuously differentiable distributed routing functions Q — {G^ : TZ^ — > <S^}„gv such 
that, for every non-destination node < v < n: 

OPe 

(b) for every nonempty proper subset C £+, there exists a continuously differentiable 
map G'^ : TZj — > Sj, where TZj :— R^, and Sj :— {p G TZj : YlijejPj ~ ^} 
simplex of probability vectors over J, such that, for every p'^ eTZj, if 

then 

g:(p^)^0, VeeC\:r, q(p")^G/(p^), yjej. 

Property (a) in Definition 7 states that, as the particle density on an outgoing link e E £^ 
increases while the particle density on all the other outgoing Unks remains constant, the fraction 
of inflow at node v routed to any link j E {e} does not decrease, and hence the fraction of 
inflow routed to link e itself does not increase. In fact, Property (a) in Definition 7 is reminiscent 
of Hirsch's notion of cooperative dynamical systems [7], [8]. On the other hand. Property (b) 
implies that the fraction of incoming particle flow routed to a subset of outgoing links K, <Z £^ 
vanishes as the density on links in /C grows unbounded while the density on the remaining 
outgoing links remains bounded. It is worth observing that, when the routing policy models 
some selfish behavior of the particles (e.g., in transportation networks), then Property (a) and 
(b) are very natural assumptions on such behavior as they capture some sort of greedy local 
minimization of the delay. 

Example 2 (Locally responsive distributed routing policy): Let 77^, for Q <v < n, and ag, for 
e e be positive constants. Define the routing policy Q by 

a^^M-JhPe^ VeeC VO<^;<n. (17) 
Z^je£+%exp(-77^p^) 

Clearly, Q is distributed, as it uses only information on the particle density on the links outgoing 
from a node v in order to compute how the inflow at node v gets split among its outgoing links. 
Moreover, for all < w < n, and e G G^^{p) is clearly differentiable, and computing partial 
derivatives one gets 

^G;M=i. ''-:i:"'''"''°"°':'"''"'':^'' >o v,6£+ j#e. ^ 
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and -^Ge{p) — for all j e E\E^. This implies that Property (a) of Definition 7 holds true. 
Property (b) is also easily verified. Therefore, ^ is a locally responsive distributed routing policy. 
In the context of transportation networks, the example in (17) is a variant of the logit function 
from discrete choice theory emerging from utilization maximization perspective of drivers, where 
the utility associated with link e is the sum of — pe + log ae/ri^ and a double exponential random 
variable with parameter 77^ (see, e.g., [21]). 

We are now ready to state our main results. The first one shows that, when the distributed 
routing policy Q is locally responsive, the dynamical flow network (6) always admits a unique, 
globally attractive limit flow vector. 

Theorem 1 (Existence of a globally attractive limit flow under locally responsive routing policies): 
Let A/^ be a flow network satisfying Assumptions 1 and 2, Aq > a constant inflow, and Q a 
locally responsive distributed routing pohcy. Then, there exists a unique limit flow /* G cl(J^) 
such that, for every initial condition p(0) G TZ, the dynamical flow network (6) satisfies 

lim /(t) = r. 

t— s>+oo 

Moreover, the limit flow /* is such that, if /* — f^'^^ for some link e e £ + outgoing from a 
nondestination node Q <v <n, then /* = for every outgoing link e e 

Proof: See Section IV. ■ 

Theorem 1 states that, when the routing policy is distributed and locally responsive, there is a 
unique globally attractive limit flow /*. Such a limit flow may be in F, in which case it is not 
hard to see that it is necessarily an equilibrium flow, i.e., /* e J^*(Ao); or belong to cl(J^)\J^, i.e., 
it satisfies the capacity constraint on one link with equality, in which case it is not an equilibrium 
flow. In the latter case, it satisfies the additional property that, on all the links outgoing from 
the same node, the capacity constraints are satisfied with equality. Such additional property will 
prove particularly useful in our companion paper [3], when characterizing the strong resilience 
of dynamical flow networks. As it will become clear in Section IV, the global convergence 
result mainly relies on Assumption 2 on monotonicity of the flow function, and Property (a) of 
Definition 7 of locally responsive distributed routing policies, from which the dynamical flow 
network (6) inherits a cooperative property. It is worth mentioning that we shall not use general 
results for cooperative dynamical systems [7], [8], [22], but rather exploit some other structural 
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Fig. 4. Dependence of the limit flow /* on the inflow Ao for the dynamical flow network of Example 3. In (a), the two 
components of the limit flow, f^^ and Z^, are plotted as functions of the inflow Ao. In (h), the curve of the limit flows is 
plotted in the (Z*,^, /g^) -plane. Observe as both components are increase from to Z™*^, as Ao ranges between and A™*'', 
while they remain constant at Z™"^, as Ao varies above A™*^. 




(a) Ao = (b) Ao = 1 (c) Ao = 2 



Fig. 5. Flow vector fields and flow trajectories for the dynamical flow network of Example 3, for three values of the inflow. 
In the first two cases Ao < AJf and hence the limit flow /* is an equilibrium flow. In contrast, in the latter case, Ao > Aq"^", 
and consequently /* is not an equilibrium flow and /*j = /^"^ and /^''^ = /e2> as predicted by Theorem 1. 

properties of (6) which in fact allow us to prove stronger results. The additional property of the 
limit flow follows instead mainly from Property (b) of Definition 7. 

Example 3: Consider a simple topology containing just the origin and the destination node, 
i.e., with V = {0, 1}, and two parallel links E — {ei, 62}. Assume that the flow functions on the 
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two links are identical /J^eAp) — fJ'e2ip) — 3(1 — e '')/4. Consider the routing policy 



/r(Ao) 



/2(Ao) 



Then, the limit flow of the associated dynamical flow network can be explicitly computed for 
every constant inflow Aq > 0, and is given by 

(l2Xo - 11 + v/(12Ao- ll)2 + 28Ao) /24 if < Aq < 3/2 
3/4 if Ao>3/2, 

(l2Xo + 11 - v'(12Ao - 11)2 + 28Ao^ /24 if < Aq < 3/2 
3/4 if Ao>3/2. 

Figure 4 shows the dependence of the limit flow /* on the inflow Aq. The two components 
/*^, and f*^, increase from to f"^^^, and, respectively, from to f^^^^, as Aq ranges from to 
^max ._ ymax f™^^, whilc they remain constant as Aq varies above X^^^. Figure 5 reports the 
vector fields and flow trajectories associated to the dynamical flow network for three different 
values of the inflow, namely Aq = 0, Aq = 1, and Aq = 2. In the first two cases, Aq < X'^^, 
and /* e J'*(Ao) is an equilibrium flow; in the case (iii), /* e cl(J'*(Ao)) \ J^*{Xq) is not an 
equilibrium flow. 

Our second main result, stated below, shows that locally responsive distributed routing policies 
are maximally robust, as the resilience of the induced dynamical flow network coincides with 
the min-cut capacity of the network. 

Theorem 2 (Weak resilience for locally responsive distributed routing policies): Let A/" be a 
flow network satisfying Assumptions 1 and 2, Aq > a constant inflow, and Q a locally responsive 
distributed routing policy such that G1{p'") > for all < f < n, e G and p" E TZy Then, 
for every f° e the associated dynamical flow network is partially transferring with respect 
to /° and has weak resilience 

Proof: See Section V. ■ 

Theorem 2, combined with Proposition 1, shows that locally responsive distributed routing 
policies achieve the maximal weak resilience possible on a given flow network J\f. A consequence 
of this result is that locality constraints on the feedback information available to routing policies 
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do not reduce the achievable weak resiUence. It is also worth observing that such maximal weak 
resilience coincides with min-cut capacity of the network, and is therefore independent of the 
initial flow f°. This is in sharp contrast with the results on the strong resilience of dynamical 
flow networks presented in the companion paper [3]. There, it is shown that the strong resilience 
depends on the initial flow, and local information constraints reduce the maximal strong resiUence 
achievable on a given flow network. 

IV. Proof of Theorem 1 

Let jV be a flow network satisfying Assumptions 1 and 2, Q a locally responsive distributed 
routing policy, and Aq > a constant inflow. We shall prove that there exists a unique /* G cl(J-') 
such that the flow f(t) associated to the solution of the dynamical flow network (6) converges 
to /* as t grows large, for every initial condition p(0) e TZ. Before proceeding, it is worth 
observing that, thanks to Property (a) of Definition 7 of locally responsive distributed routing 
policies. Assumption 2 on the monotonicity of the flow functions, and the structure of the 
dynamical flow network (6), one may rewrite (6) as 

where F : 7^ ^ is differentiable and such that 

d d 
T^F,{p)<0, ^Fe(p)>0, ye^jeS. 

ope Opj 

The above shows that, the dynamical flow network (6) driven by a locally responsive distributed 
routing policy Q is cooperative in the sense of Hirsch [7], [8]. Indeed, one may apply the standard 
theory of cooperative dynamical systems and monotone flows [7], [8], [22] in order to prove 
some properties of the solution of (6), e.g., convergence from almost every initial condition. 
However, we shall not rely on this general theory and rather use a direct approach based on a 
Lyapunov argument exploiting the particular structure of the dynamical system (6), and leading 
us to stronger results, i.e., global convergence to a unique limit flow. 

We shall proceed by proving a series of intermediate results some of which will prove useful 
also in the companion paper [3]. First, given an arbitrary non-destination node < < n, we 
shall focus on the input-output properties of the local system 

^PeW = x{t)Gi{p''{t)) - m , m = pMt)) , ve e s: , m 
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where X{t) is a nonnegative-real-valued, Lipschitz continuous input, and Pit) :— {fe{t) ■ e e 
S:^} is interpreted as the output. We shall first prove existence (and uniqueness) of a globally 
attractive limit flow for the system (19) under constant input. We shall then extend this result to 
show the existence and attractivity of a local equilibrium point under time-varying, convergent 
local input. Finally, we shall exploit this local input-output property, and the assumption of 
acyclicity of the network topology in order to establish the main result. 

The following is a simple technical result, which will prove useful in order to apply Property 
(a) of Definition 7. 

Lemma 1: Let < f < n be a nondestination node, and C" : IZ^ — )■ iS^, a continuously 
differentiable function satisfying Property (a) of Definition 7. Then, for any e TZ^, 

Y,^^^, sgn(<7e - ^e) (Glia) - GK,)) < 0. (20) 

Proof: Consider the sets K. :— {e e £^ : os > q}, J" := {e G : (Je < ^e}, and 
£ := {e e : ae < ^e}- Define 0^(0 EkeJcGliC), Gc{C) T.iecG'^iC), and GjiC) := 
'^j^jGj{(). We shall show that, for any E TZy, 

G'k;((7) < 6-^(0, Gc{<j)>Gc{<;). (21) 

Let ^ eTZv he defined by = (^k for all k e JC, and = Q for all e e \ /C. We shall prove 
that Gjc^a) — G'k:(^) < by writing it as a path integral of VG'k;(C) first along the segment Sic 
from q to ^, and then along the segment Sc from { to a. Proceeding in this way, one gets 

Gk{<j)-gM- f VG/cCO-dC+Z VG';c(C)-dC = - / VG^CO-dC+Z VG^(C)-dC, 

(22) 

where the second equality follows from the fact that Gtc{0 = ^~Gj{C) since G'"{C) G S^. Now, 
Property (a) of Definition 7 impUes that dG/ciO/dQ > for aU / G £, and dGj {C)/dCk > 
for all A; G /C. It follows that VGj{C) • dC > along S,c, and WG,c{0 • dC < along Sc. 
Substituting in (22), one gets the first inequality in (21). The second inequality in (21) follows 
by similar arguments. Then, one has 

sgn(ae - Q) {Glia) - Gli,)) = G^a) - G,c{<^) + G^O - Gc{a) < , 

which proves the claim. ■ 
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We can now exploit Lemma 1 in order to prove the following key result guaranteeing that 
the solution of the local djmamical system (19) with constant input X{t) = A converges to a 
limit point which depends on the value of A but not on the initial condition. (Cf. Example 3 and 
Figure 5.) 

Lemma 2: (Existence of a globally attractive limit flow for the local dynamical system under 
constant input) Let < < n be a non-destination node, and A a nonnegative-real constant. As- 
sume that G" :TZy ^ Sy is continuously differentiable and satisfies Property (a) of Definition 7. 
Then, there exists a unique /*(A) G cl(J^„) such that the solution of the dynamical system (19) 
with constant input X{t) = A satisfies 

lim /,(i) = /*(A), VeeC 

for every initial condition p'"{0) G TZ^. 

Proof: Let us fix some A e M+. For every initial condition a e TZy, and time t > 0, let 
$*((7) := p'"{t) be the value of the solution of (19) with constant input X{t) = A and initial 
condition p(0) = a, at time t > 0. Also, let **((7) e be defined by **((7) = jiei^Hcr)), for 
every e e Now, fix two initial conditions a,<^ e TZ-v, and define 

x{t) \ma) - , m - ■ 

Since Pe{Pe) is increasing by Assumption 2, one has that 

sgn($*(a) - $*(^)) = sgn(**(<7) - . (23) 

On the other hand, using Lemma 1, one gets 

sgn(<|.* (a) - (0) - < , > . (24) 

From (23) and (24), it follows that, for all < s < t 

X{t) = 
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Since x{t) > 0, (25) implies that /J ^{u)du < x(0) for all t > 0. Since ^(u) > 0, it follows that 
the limit 

P + OD ft 

/ i{u)du= lim / i{u)du<x{^) 
Jo *-^-+°° Jo 

exists and is finite. Now, observe that ^(i) = 1 1//^($*((7)) — //''($*(^^))| |i is a uniformly continuous 
function of t on [0, +oo), as it is the composition of the uniformly continuous functions f" i-> 
ll/^lli, p'" I-)- ijy{p^) (whose uniform continuity follows from Assumption 2), and t h-)- $*((t) and 
t I— )■ $*(^) (whose uniform continuity follows from being the solutions of the local dynamical 
system (19)). Hence, an application of Barbalat's lemma [23, Lemma 4.2] implies that ^{t) 
converges to 0, as t grows large. That is, 

lim ||^*(c7)-^*(0||i =0, Va,^e7^,. (26) 

Now, for any a e TZ^, one can apply (26) with c; :— $^((t), and get that 

lim ||^*(a) - ^*+"(a)||i = lim ||^*(a) - **(*^(a))||i = 0, Vt>0. 

t— >-+oo t— >-+oo 

The above implies that, for any initial condition p"(0) = a e TZ^, the flow is Cauchy, and 

hence convergent to some /*(A, a) e cl(J^^). It follows from (26) again, that 

||r(A,<7) - r(A,^)||i = lim ||*» - ^r*(^)||i = 0, V<7,^ e 7^, , 

t— >+oo 

which shows that the limit flow does not depend on the initial condition. ■ 
Now, let us define 

The following result characterizes the way the local limit flow /* (A) depends on the local input 
A. (Cf. Example 3 and Figure 4.) 

Lemma 3 (Dependence of the local limit flow on the input): Let < v < nhe a non-destination 
node, and A a nonnegative-real constant. Assume that G" : TZy ^ is continuously differen- 
tiable and satisfies Properties (a) and (b) of Definition 7. Let /*(A) e cl{Tv) be the Umit flow 
of the local system (19) with constant input \{t) = A, existence and uniqueness of which follow 
from Lemma 2. Then, 

(i) if A < A^*^, then 

/:(A) < /f-^ , XG:{p-\r{Xj)) = /; , Ve e C ; 
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(ii) if A > A™^, then /*(A) = f^^ for every e e £+. 
Moreover, /*(A) is continuous as a map from M_|_ to cl(J-'^). 
Proof: Define p* G 7^^ by 



majc 
e 



Pe — 



pmax 
' e 



+00 if f:{x) = f! 

Now, by contradiction, assume that there exists a nonempty proper subset J" C £^ + such that 
Pj < +00 for every j e J", and p* = +00 for every /c e /C := \ J". Thanks to Property (b) 
of Definition 7, one would have that, for any initial condition p(0) e TZ, the solution of (19) 
satisfies 

so that there would exist some r > such that 

Y^i^Giip^t)) - Mt)) < , yt>T. 

k&K 

Hence, 

Pk{t) = Yl P^^-") + fH (A^fe(^"(«)) - M'))) < ^ p,(r) < +00 , > T, 

keK keK '^'^ k&K k&K 

which would contradict the assumption that pi — +00 for every /c e /C. Therefore, either p* is 
finite for every e e or p* is infinite for every e e 
In order to distinguish between the two cases, let 

at) := Y peit) > m ■= E fe{t) . 

Observe that, for alH > r > 0, 

at)^ar) + J\x-^is))ds. (27) 

First, consider the case when A < A™^^, and assume by contradiction that p* = +00, and hence 
fe — /™^' for every e e This would imply that 

lim = A;"^ > A , 

t— >-oo 

so that there would exist some r > such that X — '&{t) < for every t > t, and hence (27) 
would imply that ({t) < ({t) < +00 for all t > r, thus contradicting the assumption that 
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Pe{t) converges to p* = +00 as t grows large. Hence, necessarily p* e TZy, and /*(A) e Ty. 
Therefore, being a finite limit point of the autonomous dynamical system (19) with continuous 
right hand side, p* is necessarily an equilibrium, and so /*(A) is an equilibrium flow for the 
local dynamical system (19). 

On the other hand, when A > A™^, (27) shows that ({t) is non-decreasing, hence convergent 
to some C(oo) £ [0, +00] at t grows large. Assume, by contradiction, that C(oo) is finite. Then, 
passing to the limit of large t in (27), one would get 

/+00 
(A - i9{s))ds - C(oo) - C(t) < C(oo) < +00 . 

This, and the fact that ^{t) < A^'^'^ < A for all t > 0, would imply that 

lim ^(t) = A . (28) 

Since fe{t) < f^""", (28) is impossible if A > A^^^. On the other hand, if A = A^"^^, then (28) 
implies that, for every e G fe{t) converges to f^'^"^, and hence Pe{t) grows unbounded as t 
grows large, so that ({oo) would be infinite. Hence, if A > A™*^^, then necessarily C{oo) is infinite, 
and thanks to the previous arguments this implies that p* = +00, and hence /*(A) = for 
all a eUy, ee E+. 

Finally, it remains to prove continuity of /*(A) as a function of A. For this, consider the 
function H : (0, +00)^"^ x (0, A°^^^) ^ R^- defined by 

H,(p\ A) := XGl(p') - pe(Pe) , Ve e ^ . 



Clearly, H is differentiable and such that 




where the inequality follows from the strict monotonicity of the flow function (see Assumption 
2). Property (a) in Definition 7 implies that dHj{p", \)/dpe > for all j 7^ e e Hence, from 
(29), we also have that dH^ip" ,X)/dpe < for aU e e Therefore, for all p" e (0,+oo)^-^, 
and A e (0, X^'^^), the Jacobian matrix V pvH{p'" , A) is strictly diagonally dominant, and hence 
invertible by a standard application of the Gershgorin Circle Theorem, e.g., see Theorem 6.1.10 
in [24]. It then follows from the implicit function theorem that p*(A), which is the unique zero 
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of i?( • , A), is continuous on the interval (0, A™^). Hence, also /*(A) = //(p*(A)) is continuous 
on (0, A™*"), since it is the composition of two continuous functions. Moreover, since 

^/e*(A)=A, 0</:(A)</--, VeeC, VAe(0,A--), 
one gets that 

lim/;(A)=0, lim /*(A) = /--, 

for all e e 8+. Now, one has that Eee£+ /e (0) = 0' so that 

= /:(0) = lim/;(A), Vee£:+. 
Moreover, as previously shown, 

/: (A) = fT^ = lirn^ /: (A) , VA > A-- . 

ATA„ 

This completes the proof of continuity of /*(A) on [0, +oo). ■ 

While Lemma 2 ensures existence of a unique limit point for the local system (19) with 
constant input \{t) = A, the following lemma establishes a monotonicity property with respect 
to a time-varying input X{t). 

Lemma 4 (Monotonicity of the local system): Let < v < n he a nondestination node, G" : 
TZy ^ Sv a continuously differentiable map, satisfying Properties (a) and (b) of Definition 7, 
and A~(t), and A"'"(t) be two nonnegative-real valued Lipschitz -continuous functions such that 
A^(t) < A+(t) for all t >0. Let p^{t) and p^{t) be the solutions of the local dynamical system 
(19) corresponding to the inputs A~(t), and A+(t), respectively, with the same initial condition 
p-(0) = p+(0). Then 

p:{t)<pt{t), Vee£:+,Vi>0. (30) 

Proof: For e G define := inf{t > : > Pei^)}, and let r := min{re : e G S^}. 

Assume by contradiction that p~{t) > p'^{t) for some t > 0, and e e S^. Then, r < +oo, and 
I :— argmin{Te : e G is a well defined nonempty subset of Moreover, by continuity, 
one has that there exists some £ > such that, p~{t) — pt{r), p~{t) > pt{t), and pj{t) < p^{t) 
for all i e T, j e J, and t G (r, r + £), where J :— \I. Using Lemma 1, one gets, for 
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every t e (r, r + e), 

= 1 (E. W) - G^(p^W) - E, W) + E, G]{p^t))) 

= E^GKp-it))-E^GKp^t)), 

where the summation indices e, i, and j run over £^+, X, and J, respectively. On the other 
hand. Assumption 2 implies that pi{p^{t)) > pi{pf{t)) for all i E I, t E [r, r + e). Now, let 
Xit)-^ Eiex - Ptit)) ■ Then, for every te{r,T + e), one has 

< X{t)-X{r) 

= £ A-(.) 5^^^^ (G,^(p-(5)) - GKp-m ds 

- J\x^{s) - X-{s)) G^,{p-'{s))ds - 1^ {^^^{p-{s)) - Piiptis))) ds 

< 0, 

which is a contradiction. Then, necessarily (30) has to hold true. ■ 

The following lemma establishes that the output of the local system (19) is convergent, 
provided that the input is convergent. 

Lemma 5 (Attractivity of the local dynamical system): Let < t' < n be a nondestination 
node, G'" : IZ^ ^ Sy a continuously differentiable map, satisfying Properties (a) and (b) of 
Definition 7, and X{t) a nonnegative-real-valued Lipschitz continuous function such that 

lim \{t) = X. (31) 

>+CX) 

Then, for every initial condition p(0) e TZ, the solution of the local dynamical system (19) 
satisfies 

lim /e(i) = /:(A), yeeS:, (32) 

where /*(A) is as defined in Lemma 2. 

Proof: Flk some £ > 0, and let r > be such that \X{t) — A| < £ for all t > t. For t > r, let 
f~{t) and f'^{t) be the flow associated to the solutions of the local dynamical system (19) with 
initial condition p~{t) — p'^{r) — p'"{r), and constant inputs X~{t) = A~ := max{A — £, 0}, 
and A+ (t) = X + e, respectively. From Lemma 4, one gets that 

f;{t)<fe{t)<fnt), yt>r, Vee£:+. (33) 
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On the other hand. Lemma 2 impUes that / (t) converges to /*(A ), and f'^{t) converges to 
/*(A+), as t grows large. Hence, passing to the Umit of large t in (33) yields 

/:(A-) <liminf/e(i) <limsup/e(i) </:(A + £), Ve e £:+ . 

Form the arbitrariness of e > 0, and the continuity of /*(A) as a function of A by Lemma 3, it 
follows that f{t) converges to /*(A), as t grows large, which proves the claim. ■ 

We are now ready to prove Theorem 1 by showing that, for any initial condition p(0) e TZ, 
the solution of the dynamical flow network (6) satisfies 

lim = /: , (34) 

t— >-+oo 

for all e G £. We shall prove this by showing via induction on f = 0, 1, . . . , n — 1 that, for all 
e e there exists /* e [0, Z™*"] such that (34) holds true. First, observe that, thanks to Lemma 
2, this statement is true for v — 0, since the inflow at the origin is constant. Now, assume that 
the statement is true for all < v < w, where w e — 2} is some intermediate node. 

Then, since £~ C \J'^~q£:^, one has that 

lim X-{t) = lim ^ m = Yl fe = K ■ 

Then, Lemma 5 implies that, for all e e S:^, (34) holds true with /* = /*(A^), thus proving the 
statement for v = w. This proves the existence of a globally attractive limit flow /*. The proof 
of Theorem 1 is completed by Lemma 3. 



V. Proof of Theorem 2 

This section is devoted to the proof of Theorem 2 on the weak resilience of dynamical flow 
networks with locally responsive distributed routing policies Q. 

To start with, let us recall that in this case Theorem 1 implies the existence of a globally 
attractive limit flow /* e cl(J') for the perturbed dynamical flow network associated to any 
admissible perturbation J\f. Define Aq = Aq, and A* = '^eeSv -^e* ' ^^r < v < n. 

Lemma 6: Consider a dynamical flow network M satisfying Assumptions 1 and 2, with locally 
responsive distributed routing policy Q such that G1{p'") > for all < v < n, e e and 
p" e TZy. Then, for every 9 > 1, there exists jie G (0) 1) such that, if M is an admissible 
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perturbation of M with stretching coefficient less than or equal to 9, and /* e cl(^) is the limit 
flow vector of the corresponding perturbed dynamical flow network (11), then 

/; > l^eK , 

for every non-destination node < v < n, and every link e e for which /* < /™^/2. 

Proof: First, observe that the claim is trivially true if f* > /f '"/2 for all e e E. Therefore, 
let us assume that there exists some link e G £^ for which /* < Define G TZv by 

Pj = for all j E 8^ , j ^ e, and Pg = 6p^, where recall that is the median density of the 
flow function ji^- Since the stretching coefficient of N is less than or equal to 9, one has that the 
median densities of the perturbed and the unperturbed flow functions satisfy < 9p'^. This and 
the fact that /* < /™^/2 imply that Pl < < pi, while clearly p* > = pj for all j G 
j 7^ e. Now, let /3e := Gl{p^), and observe that, thanks to the assumption on the strict positivity 
of Gl{p'"), one has l3e > 0. Then, from Lemma 1 one gets that 

= I (gUp*) + 1 - G]{p*)) > \ (gI{p<^) + 1 - ^ .^^ q(p^)) = Gl{p<^) = ■ 

(35) 

On the other hand, since /* < /™^/2 < /^^, Lemma 2 impUes that necessarily A*Gg(p*) = /*. 
The claim now follows by combining this and (35). ■ 

As a consequence of Lemma 6, we now prove the following result showing that the dynamical 
flow network is partially transferring and providing a lower bound on its weak resilience: 

Lemma 7: Let be a flow network satisfying Assumptions 1 and 2, Aq > a constant inflow, 
and Q a locally responsive distributed routing policy such that Gl{p") > for all < ^; < n, 
e e E^, and p^ G 71^. Then, the associated dynamical flow network is partially transferring, 
and, for every 9 > 1, and a G (0, its resilience satisfies 

7M(r,^)>C(AA)-2|£|Ao/3^"a, 

where G (0, 1) is as in Lemma 6. 

Proof: Consider an arbitrary admissible perturbation J\f of magnitude 

S < G{N) - 2|£|Ao/3g'-"Q; , (36) 

and stretching coefficient less than or equal to 9. We shall iteratively select a sequence of nodes 

=: Vq, Vi, . . . ,Vk := n such that, for every I < j < k, 

3iG{0,...,i-l} such that {vi,Vj)eS, /(;„„,)> Aoa/^r" . (37) 
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Since Vk — n, and /3q " > 1, the above with j — k < n will immediately imply that 

lim Kit) = a; - V ^_ /: > aXoPt"" > «Ao , (38) 

SO that the perturbed dynamical flow network is a- transferring. For < a < ^^~7(2|^|Ao), 
one could chose a trivial perturbation Af = J\f so that (38) would imply the partial transferring 
property of the original dynamical flow network. Moreover, the rest of the claim will then readily 
follow from the arbitrariness of the considered admissible perturbation. 

First, let us consider the case j — 1. Assume by contradiction that f* < AqQ;/?^"'^, for every 
link e e £q. Since a < /3q, this would imply that /* < PoXq and hence, by Lemma 6, that 
jmax < 2f* for aU e e S^, so that 

Combining the above with the inequality C{J\f) < J^eee;^ fT^^ would get 

thus contradicting the assumption (36). Hence, necessarily there exists e E £q such that /* > 
Aoa/3g~", and choosing vi to be the unique node in V such that e e one sees that (37) holds 
true with j = I. 

Now, fix some 1 < j* < k, and assume that (37) holds true for every 1 < j < j*. Then, by 
choosing i as in (37), one gets that 

K = Eee£+. - ^l^^'^^) - - ^0"/^^"'"" , VI < J < J* . (39) 

Moreover, 

a; = Ao > Aoa/3,-- > Aoa/3f . (40) 

Let U := {fo, Vi, . . . ,Vj*^i} and £^ <Z £ the set of links with tail node in U and head node 
in V \ Assume by contradiction that 

Thanks to (39) and (40), this would imply that, f* < /JgA*, for every < j < j* and e e £;^.n£u. 
Then, since £^ = ufSQ^{£+. n £^1), Lemma 6 would imply that /^^^ < 2/*,for every e e f:^;)" . 
This would yield 
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From the above and the inequality C{M) < Ylie(^s+ /™^' would get 

thus contradicting the assumption (36). Hence, necessarily there exists e G f ^ such that /* > 
AoQ;/3g~", and choosing Vj* to be the unique node in V such that e G 8~^^ one sees that (37) 
holds true with j — j*. Iterating this argument until Vj* — n proves the claim. ■ 

It is now easy to see that Lemma 7 implies that lim^j^o 7a,6» > C!{J\f) for every 9 > 1, thus 
showing that 7o(/°,^) > C{Af). Combined with Proposition 1, this shows that 7o(/°,^) = 
C{N), thus completing the proof of Theorem 2. 

VI. Conclusion 

In this paper, we studied robustness properties of dynamical flow networks, where the dy- 
namics on every link is driven by the difference between the inflow, which depends on the 
upstream routing decisions, and the outflow, which depends on the particle density, on that 
link. We proposed a class of locally responsive distributed routing policies that rely only on 
local information about the network's current particle densities and yield the maximum weak 
resilience with respect to adversarial disturbances that reduce the flow functions of the links of 
the network. We also showed that the weak resilience of the network in that case is equal to 
min-cut capacity of the network, and that it is independent of the local information constraint 
and the initial flow. Strong resilience of dynamical flow networks is studied in the companion 
paper [3]. 
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